https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 04:43:33 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-252060 EUVD-2026-252060 https://cve.radiocsirt.org/vuln/euvd-2026-252060 https://cve.radiocsirt.org/vuln/fkie_cve-2025-55037 <p>Improper neutralization of special elements used in an OS command (&#39;OS Command Injection&#39;) issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote unauthenticated attacker if the settings are configured to construct messages from external sources.</p> <p>Improper neutralization of special elements used in an OS command (&#39;OS Command Injection&#39;) issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote unauthenticated attacker if the settings are configured to construct messages from external sources.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-55037 https://cve.radiocsirt.org/vuln/ghsa-hfrj-3w3g-jv32 <p><strong>Affected:</strong> PyPI: TkEasyGUI</p> <p>Improper neutralization of special elements used in an OS command (&#39;OS Command Injection&#39;) issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote unauthenticated attacker if the settings are configured to construct messages from external sources.</p> <p><strong>Affected:</strong> PyPI: TkEasyGUI</p> <p>Improper neutralization of special elements used in an OS command (&#39;OS Command Injection&#39;) issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote unauthenticated attacker if the settings are configured to construct messages from external sources.</p> https://cve.radiocsirt.org/vuln/ghsa-hfrj-3w3g-jv32 https://cve.radiocsirt.org/vuln/jvndb-2025-000075 <p>TkEasyGUI provided by kujirahand contains multiple vulnerabilities listed below.&lt;ul&gt;&lt;li&gt;OS command injection (CWE-78) - CVE-2025-55037&lt;/li&gt;&lt;li&gt;Uncontrolled search path element (CWE-427) - CVE-2025-55671&lt;/li&gt;&lt;/ul&gt; Satoki Tsuji of Ikotas Labs, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>TkEasyGUI provided by kujirahand contains multiple vulnerabilities listed below.&lt;ul&gt;&lt;li&gt;OS command injection (CWE-78) - CVE-2025-55037&lt;/li&gt;&lt;li&gt;Uncontrolled search path element (CWE-427) - CVE-2025-55671&lt;/li&gt;&lt;/ul&gt; Satoki Tsuji of Ikotas Labs, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2025-000075 https://cve.radiocsirt.org/vuln/pysec-2026-552 <p><strong>Affected:</strong> PyPI: tkeasygui</p> <p>Improper neutralization of special elements used in an OS command (&#39;OS Command Injection&#39;) issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote unauthenticated attacker if the settings are configured to construct messages from external sources.</p> <p><strong>Affected:</strong> PyPI: tkeasygui</p> <p>Improper neutralization of special elements used in an OS command (&#39;OS Command Injection&#39;) issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote unauthenticated attacker if the settings are configured to construct messages from external sources.</p> https://cve.radiocsirt.org/vuln/pysec-2026-552